CVE-2004-0869

None

CVSS

—

EPSS

14.8%

Published

Sep 16, 2004

CISA due date

—

The record

Internet Explorer does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."

Affected packages

Ecosystem	Package	Introduced	Fixed